Plugin icon

Hide My WP Ghost – Security & Firewall

hide-my-wp

Vulnerabilities:

14

Last Updated:

September 15, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-09-18
Title
WP Ghost (Hide My WP Ghost) < 7.0.03 - Unauthenticated Open Redirect via 'redirect_to' Parameter
Fixed in
Fixed in 7.0.03
CVSS
4.7 (medium)
Published
2026-09-16
Title
WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters
Fixed in
Fixed in 7.0.11
CVSS
5.3 (medium)
Published
2026-09-16
Title
WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check
Fixed in
Fixed in 7.0.11
CVSS
5.3 (medium)
Published
2026-09-07
Title
WP Ghost (Hide My WP Ghost) < 7.0.10 - Unauthenticated SSRF
Fixed in
Fixed in 7.0.10
CVSS
5.8 (medium)
Published
2026-07-23
Title
WP Ghost (Hide My WP Ghost) – Security & Firewall < 7.0.07 - Two-Factor Authentication Bypass
Fixed in
Fixed in 7.0.07
CVSS
4.3 (medium)
Published
2026-07-13
Title
Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass
Fixed in
Fixed in 7.0.05
CVSS
5.4 (medium)
Published
2026-03-18
Title
Hide My WP Ghost < 7.0.00 - Unauthenticated Open Redirect
Fixed in
Fixed in 7.0.00
CVSS
4.7 (medium)
Published
2025-03-19
Title
Hide My WP Ghost < 5.4.02 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 5.4.02
CVSS
8.1 (high)
Published
2025-03-13
Title
WP Ghost < 5.4.02 - Unauthenticated Limited File Read
Fixed in
Fixed in 5.4.02
CVSS
5.9 (medium)
Published
2025-02-11
Title
Hide My WP Ghost < 5.4.01 - Hidden Login Page Disclosure
Fixed in
Fixed in 5.4.01
CVSS
5.3 (medium)
Published
2024-11-14
Title
Hide My WP Ghost – Security & Firewall < 5.3.02 - Reflected Cross-Site Scripting via URL
Fixed in
Fixed in 5.3.02
CVSS
6.1 (medium)
Published
2024-07-02
Title
Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
Fixed in
Fixed in 5.2.02
CVSS
5.3 (medium)
Published
2023-05-08
Title
Hide My WP Ghost – Security < 5.0.20 - IP Address Spoofing
Fixed in
Fixed in 5.0.20
CVSS
6.5 (medium)
Published
2018-09-15
Title
Hide My WP <= 2.0.02 - SQL Injection & Script Injection
Fixed in
Fixed in 2.0.03
CVSS
n/a